Secure method for managing the operating conditions of a apparatus by a user and equipment therefor

ABSTRACT

The invention concerns a method for enabling an apparatus ( 15 ) to operate only after detecting with receiver means ( 11 ) located proximate to said apparatus, a signal transmitted by portable transmitted means ( 1 ), which consists in no longer taking into account detection by the receiver means ( 11 ) of the signal transmitted by the transmitting means ( 1 ), after activating presence sensing means ( 22 ) provided proximate to said apparatus, or integrated in said apparatus. Once activated, the presence sensing means ( 22 ) neutralise the transmitter/receiver device ( 1, 11 ) and the apparatus can operate normally without being perturbed by possible statics or accidental losses of signal. The inventive method and device are applicable to an antitheft safety device for a motor vehicle.

[0001] This invention concerns a secured method for managing theoperation of an apparatus by a user, which method is of the typeconsisting in enabling the operation of the apparatus only afterdetection by receiving means situated close to said apparatus, of asignal transmitted by portable transmitting means; the invention alsoconcerns the hardware for the implementation of the method.

[0002] One already knows safety systems adapted on an apparatus which,to authorize the operation of this apparatus, involve the existence of alink between a transmitter carried by the user and a receiver providedclose to said apparatus or on said apparatus.

[0003] For example, the document EP-0 319 428 describes an anti-theftsafety device for vehicle comprising a portable transmitter whichtransmits a high frequency signal (HF), and a fixed receiver adapted forcutting off automatically the ignition circuit of the engine of thevehicle assembly, when the distance between said portable transmitterand said on-board receiver exceeds a certain value. Such a systemenables to stop the motorisation of the vehicle, in particular in caseof theft, as soon as said vehicle moves away from the carrier of thetransmitter. The transmitter transmits a low power, encoded cyclic HFsignal. When this signal is acknowledged and validated by the receptionmeans, a relay or equivalent closes the ignition circuit of the engineto ensure its operation. When the reception system does not receive theHF signal transmitted any longer, the relay or equivalent cuts off theignition circuit in order to stop the motorisation. A time-delay circuitis provided to maintain the control of the relay for a duration greaterthan that intermediate two encoded sequences, in order to avoid anyfalse interruption in case of interferences, or more generally in caseof accidental loss of the signal.

[0004] However, if the duration of accidental loss of this signal isgreater than the time-delay duration, the ignition circuit isautomatically cut off by means of the relay and the motorisation of thevehicle does not operate any longer. This may cause sizeablemalfunctions, and may even prove dangerous.

[0005] The object of this invention is to remedy this shortcoming.

[0006] Within the framework of a method consisting in enabling theoperation of an apparatus only after detection by receiving meanssituated close to said apparatus, of a signal transmitted by portabletransmitting means, this invention allows not to take into account anylonger the detection by the receiving means of the signal transmitted bythe transmitting means, after activation of presence detection meansarranged close to said apparatus, or integrated to said apparatus. Themethod according to this invention consists in fact in activating aswitching system interposed on the control circuit of the apparatus, inorder to close such circuit after detection of the signal transmitted bythe transmitting means, and to lock this closure by activating presencedetection means arranged close to said apparatus, or integrated to saidapparatus.

[0007] According to a preferred embodiment, the method according to thisinvention consists, once the apparatus in operation, in triggering byeach activation of the presence detection means, a second safetydetection of the signal transmitted by the transmitting means, for apreset time period and, once said time period has expired, in locking,either the closure of the control circuit of said apparatus in case of avalidation of signal, or the opening of said circuit in case ofnon-validation of this signal, while not taking into account any longer,after locking said closure or opening of the circuit, thetransmitter/receiver link. One then takes into account again the basictransmitter/receiver link, after a change of state (deactivation) of thepresence detection means.

[0008] In case of absence of problem associated with a theft or with anaggression, the presence detection means neutralise thetransmitter/receiver device and the apparatus may operate normally,without being disturbed by possible interferences or accidental loss ofsignal.

[0009] The hardware for the implementation of this method comprises:

[0010] portable transmitting means,

[0011] a receiver module situated close to the apparatus whereof onewishes to manage the operation,

[0012] a switching system (such as relay, transistor, switch orequivalent) interposed on the control circuit of the apparatus,

[0013] presence detection means arranged close to said apparatus orintegrated to said apparatus, and

[0014] control means (for example in the form of a microprocessor) whichare laid out to close the control circuit of the apparatus by means ofthe switching system when the signal transmitted by the transmittingmeans is detected by the receiving means, and acknowledged, and whichare laid out to lock the closure of this control circuit when thepresence detection means are activated.

[0015] The transmitting means have preferably limited power, in order toauthorize the reception of the signal by the receiver module, onlywithin a radius of several metres.

[0016] Still according to the invention, the switching system is in theform of a power output interposed on the control circuit of theapparatus to cut off or restore such circuit in relation to the signalor of the absence of signal supplied by control means in the form of amicroprocessor, which microprocessor manages the sending of this signalin relation to the information received by the receiving means.

[0017] According to another preferential characteristic, the controlmeans of the safety hardware are laid out in order to, once theapparatus in operation, trigger by each activation of the presencedetection means, a second safety detection of the signal transmitted bythe portable transmitting means, for a pre-set time period (for example15 seconds); once this time period has expired, said control means lock,either the closure of the control circuit of the apparatus in case of avalidation of said signal, or the opening of said circuit in case ofnon-validation of said signal, this without taking into account anylonger said locked closure or opening, of the transmitter/receiver link.

[0018] The control means of the safety hardware take again into accountthe transmitter/receiver link, after a change of state (deactivation) ofthe presence detection means.

[0019] In an embodiment applied to an anti-theft safety device for anengine vehicle, the hardware according to this invention comprisesportable transmitting means, a receiver module on board the vehicle,presence detection means integrated to said vehicle and control means ofa switching system placed on at least a circuit necessary to the correctoperation of said vehicle, for example the ignition circuit of themotorisation, the starter circuit, or the fuel incoming circuit. Thesecontrol means are laid out to close said circuit by means of saidswitching system when the signal transmitted by the transmitting meansis detected by the receiver module, and acknowledged; they are also laidout to manage the locking of the closure or of the opening of saidcircuit in relation to the second identification control triggered bythe presence detection means.

[0020] In this particular application, the presence detection means maybe in the form of a sensor implanted in or on the seat of the vehicleand adapted to be activated when the user of the vehicle sits down onsaid seat. According to embodiment variations, such presence detectionmeans may be in the form of a system for detecting when a gear has beenselected, or in the form of system for detecting a given threshold of anengine duty. Within the framework of an application to an automotivevehicle or to a lorry, such presence detection means may be in the formof a closure/opening sensor for the driver's door, in the form of asystem for detecting when the seatbelt has been fastened, in the form ofan infrared sensor positioned in the body of the vehicle, or other . . .

[0021] According to another characteristic, adapted means enable todetect the presence or the absence of a starter contact, thecorresponding information being transmitted aux control means in orderto activate the receiver module only in case of presence of said startercontact.

[0022] According to another particularity, within the framework of anapplication to an automotive vehicle or to a lorry, a presence sensormay be laid out close to the driver's door, the activation informationof said presence sensor being transmitted to the control means of thesafety device, in order to activate the receiver module.

[0023] But the invention will be better illustrated, without beinglimited thereto, by the following description of a particularembodiment, given only for exemplification purposes and represented onthe appended drawings wherein:

[0024]FIG. 1 is a principle diagram of the portable transmitting meansof an antitheft safety device for an engine vehicle, according to thisinvention;

[0025]FIG. 2 represents the principle diagram of reception and controlmeans on board the vehicle.

[0026] The transmitting means 1 represented on FIG. 1 comprise atransmission module 2, for example high frequency (HF), whereof theoperation is managed by a microprocessor 3 to send to an antenna 4 acyclic and low power encoded signal. The transmission module 2 may be amodel LQ-TX 433A-S of LPRS-OXON-Great-Britain. The microprocessor 3 withintegrated clock may be a model 2343 with EDPROM, of Société ATMEL(Paris, France).

[0027] The different components of the transmitting means 1 areimplanted on a printed circuit and connected together logically. Abattery 5 provides their electrical supply and the assembly is placed ina portable box which may be fitted with a system for hanging on a pocketor a belt.

[0028] Putting into or off operation of the transmitting means 1 iscontrol by an on/off switch 6 laid out on the portable box. This boxcomprises moreover a LED-type light-indicator 7 whereof the activationis managed by the microprocessor 3.

[0029] The signal transmitted by the transmitting means 1 carries anencoding generated by the microprocessor 3 to secure the operation ofthe device. On the other hand, the signal is transmitted cyclically tospare the battery 5; for example the transmission is realised on the868.35 MHz frequency, and this for one second every 2.5 or 3 second (thetransmission duration and the period are managed by the microprocessor3). One also intends to limit the power of the signal transmitted (a fewmilliwatts) in order to enable the reception of this signal only withina radius of several metres.

[0030] The reception and control means 8 represented on FIG. 2 are onboard the vehicle assembly (for example a motorbike). They are composedof an antenna 10 connected to a reception module 11 associated with amicroprocessor 12. The purpose of such microprocessor 12 is to check byencoding identification that the signal received is indeed the oneoriginated from the transmitting means 1 and, in relation to theinformation received, in order to manage the activation:

[0031] of a power output 14 (relay or equivalent) placed on the ignitioncircuit 15 of the motorisation of the vehicle, and

[0032] of a power output 16 (relay or equivalent) which controls,simultaneously, a sound alarm 17 in the form of a <<buzzer>> and aredundant output with non-return diodes 18, 19 to supply the right 20and left 21 indicator beams.

[0033] To manage the operation of the safety device, the microprocessor12 also takes into account:

[0034] the activation or the deactivation of a presence sensor 22 laidout on the driver's seat of the vehicle. This sensor 22 may be of FSRtype distributed by ALCYON—Paris, France, et

[0035] the presence or the absence of a starter contact of the vehicle.The corresponding information is transmitted to the microprocessor byappropriate detection means 23 (for example from a voltage detected onthe on/off contact of the starter).

[0036] The reception module 11 may be a model RX 5000 manufactured byRFM (USA) and distributed by EQUIPEMENT SCIENTIFIQUE—Garche, France. Themicroprocessor 12 is for example a model PIC 16C with integratedconverter of MICROTCHIP (USA) and distributed by AROW—Rennes, France.The different electronic components of the reception and control means 8are implanted on a printed circuit and connected together logically. Thereception module 11 and the microprocessor 12 are supplied by thebattery 24 of the vehicle.

[0037] Once the reception and control means 8 have been implantedcorrectly on the vehicle assembly, the anti-theft safety device operatesas described below.

[0038] The transmitting means 1 and the receiver module 11 beingdeactivated, the microprocessor 12 controls the power output 14 inorder-to open the ignition circuit 15 of the vehicle, thereby preventingthe operation of the motorisation.

[0039] Putting into service the transmitting means 1 is made by bringingthe switch 6 into the <<on>> position; the light-indicator 7 may signalsuch activation for example by a steady so-called <<long>> light, graterthan 1 second.

[0040] On the other hand, putting into service the receiver module 11 ismade by the starter contact of the vehicle, by means of the key placedin 12 Volt position after contact. The receiver module 11 is in factactuated by the microprocessor 12 on the basis of a piece of informationsupplied by the detection means 23.

[0041] As soon as the starter contact has been established, the receivermodule 11 detects the HF signal transmitted by the transmitting means 1and it sends the information to the microprocessor 12. Afteridentification of the signal, the microprocessor 12 closes the ignitioncircuit 15 by means of the power output 14; simultaneously it mayinitiate the transmission of an identification message while activatingthe blinkers 20, 21 and the buzzer 17 by means of the power output 16(for example transmission of three <<short>> flashing signalsaccompanied by three sound beeps). The vehicle may then be started.

[0042] When the user sits down on the seat of the vehicle, the presencesensor is activated and the microprocessor 12 then requests anadditional safety validation of the signal transmitted by thetransmitting means 1, for a pre-set safety time period, which may be ofthe order of 15 seconds.

[0043] In the general case when the receiving means 11 detect andacknowledge the signal transmitted by the transmitting means 1 for thewhole duration of the safety time-period aforementioned, with theexpiration of this time period, the microprocessor 12 locks the closureof the ignition circuit 15 by means of the power output 14 withouttaking into account any longer the basic HF signal from thetransmitting/receiving means. The vehicle may be used conventionally,without this use being disturbed by possible accidental losses of the HFsignal.

[0044] In the other case when the receiving, means 11 do not detect ordo not recognise the HF signal transmitted by the portable transmittingmeans 1 for the whole duration of the safety time-period, themicroprocessor 12 opens the ignition circuit 15 by means of the poweroutput 14 and locks the opening of this circuit without taking intoaccount any longer the HF signal of the transmitting/receiving means.

[0045] In either case mentioned aforementioned, the microprocessor 12will again take into account the HF link of the transmitting/receivingmeans at the time of deactivation of the presence sensor 22; and theprocedure detailed above will be repeated after new activation of saidsensor 22.

[0046] Each activation of the presence sensor 22 involves a newidentification request of the HF signal between the transmitting meansand the receiving means. And each deactivation of said sensor causes the<<permanent>> HF link of the transmitting/receiving means to be takeninto account again; taking into account the <<permanent>> HF link againmay be performed after a time-delay which is greater than the cyclictransmission period of the HF signal.

[0047] Further to a conventional usage of the vehicle, when the userkills the starter contact, the receiver module 11 is not activated anylonger and the microprocessor 12 cuts off automatically the startercircuit 15 by means of the power output 14 to put the anti-startingsystem into service.

[0048] Putting the anti-starting system into service may be accompaniedby a control signal of the light-indicator 7 (for example a <<short>>steady light of the order of a few tens of a second); also, suchactivation of the anti-starting system may be signalled by the flashinglights 20, 21 and the <<buzzer>> 17 (for example transmission of a<<short>> luminous signal accompanied by a sound beep). The switch 6 ofthe transmitting means 1 may be placed in the <<off>> as position sincethe receiver module 11 cannot receive the HF signal transmitted anylonger.

[0049] According to the management mode which has just been described,when the vehicle is en operation, if the user walks away after leavingthe seat, without cutting off the motorisation, as soon as the receivermodule 11 does not receive the HF signal transmitted by the transmittingmeans 1 any longer, the microprocessor 12 activates the power output 14to cut off the ignition circuit 15. The vehicle cannot then start untilthe carrier of the transmitting means 1 activates the starter contact.

[0050] In case of theft or intrusion, with the engine on, the presencesensor 22 is deactivated when the standard user leaves his seat, then itis re-activated when the intruder takes possession of the vehicle. Ifthe receiver module 11 does not receive the HF signal transmitted by thetransmitting means 1 any longer by the end of the safety time-period(which can be denominated <<identification range>>) triggered by theintruder sitting down, the microprocessor 12 activates the power output14 to cut off the ignition circuit 15 in order to stop the vehicle uponcompletion of said <<identification range>>, without taking into accountthe HF transmitter/receiver link any longer.

[0051] If the receiver module 11 has received constantly the HF signaltransmitted by the transmitting means 1 up to the completion of<<identification range>>), the intruder may drive away with the vehicle,but the starter circuit 15 will be open during the next change of stateof the sensor to render the vehicle unusable.

[0052] As a variation, the power output 14 may be placed on the startercircuit of the vehicle; still according to another variation, this poweroutput 14 may control an electro-mechanical system placed on the fuelincoming circuit.

[0053] More generally, the switching system 14 managed by themicroprocessor 12 may control any member necessary to the correctoperation of the vehicle.

[0054] It should also be noted that in addition to the control of thepower outputs 14 and 16, the microprocessor 12 may also manage one orseveral additional power output(s) entrusted with activating ordeactivating other functions of the vehicle. Thus, several membersnecessary to the correct operation of the vehicle may be managedsimultaneously (ignition circuit, starter function, fuel incomingcircuit . . . ).

[0055] It should further be noted that the seat sensor 22 described inrelation with the embodiment above, may be replaced with a system fordetecting when a gear has been selected, by a system for detecting whena threshold of a given engine duty has been exceeded (for example 2000rpm.), or other . . . , while adhering to the same general operationprinciple. The latter case evoked (system for detecting when a thresholdof a given engine duty has been exceeded), may in particular be quitesuitable to an application of the anti-theft safety device to a vehiclesuch as a scooter.

[0056] Within the framework of an application of an anti-theft safetydevice similar to an automotive vehicle (conventional car or lorry,notably), the presence detection means may be composed of aclosure/opening sensor of the driver's door, of a safety belt fasteningsensor, of an infrared sensor placed in the body of the car, or other .. .

[0057] On the other hand, putting into service the receiver module mayin such a case be performed by an infrared sensor placed close to thedriver's door, for example on the rear-mirror or the handle.

[0058] The principle according to this invention for neutralising thetransmitting/receiving means by presence detection means enables to makethe overall operation of the anti-theft device secure and reliable.

[0059] The same principle may be used in very different fields forexample for accessing premises, for controlling access to amicrocomputer (the presence sensor corresponding here to a piece ofinformation regarding the use of key on a keyboard, of a game joystick,of the mouse or other . . . ).

1. A secured method for managing the operation of an apparatus by auser, which method consists in rendering said operation possible onlyafter detection by receiving means (11) situated close to saidapparatus, of a signal transmitted by portable transmitting means (1),characterised in that it consists in not taking into account any longerthe detection by the receiving means (11) of the signal transmitted bythe transmitting means (1) to enable the operation of said apparatus,after activation of presence detection means (22) arranged close to saidapparatus or integrated to said apparatus.
 2. A method according toclaim 1, characterised in that it consists: in activating a switchingsystem (14) interposed on the control circuit (15) of the apparatus, inorder to close said circuit (15) after detection of the signaltransmitted by the transmitting means (1), and in locking this closureby the activation presence detection means (22) arranged close to saidapparatus, or integrated to said apparatus.
 3. A method according toclaim 2, characterised in that it consists, once the apparatus inoperation, in triggering by each activation of the presence detectionmeans (22) a second safety detection of the signal transmitted by thetransmitting means (1), for a pre-set time period, and, once saidtime-period has been exceeded, in locking either the closure of thecircuit (15) in case of a validation of said signal, or the opening ofsaid circuit (15) in case of non-validation of said signal, this withouttaking into account any longer, after corresponding locked closure oropening, the transmitter/receiver link.
 4. A method according to claim3, characterised in that it consists in taking into account again thebasic transmitter/receiver link after deactivation of the presencedetection means (22).
 5. A hardware for the implementation of the methodaccording to any of the claims 1 to 4, characterised in that itcomprises: portable transmitting means (1), a receiver module (11)situated close to the apparatus whereof one wishes to manage theoperation, a switching system (14), such as relay, transistor, switch orequivalent, interposed on the control circuit (15) of said apparatus,presence detection means (22) arranged close to said apparatus orintegrated to said apparatus, and control means (12) laid out to closethe control circuit (15) of the apparatus by means of the switchingsystem (14) when the signal transmitted by the transmitting means (1) isdetected by the receiver module (11) and acknowledged, and laid out tolock the closure of said control circuit (15) when said presencedetection means (22) are activated.
 6. A hardware according to claim 5,characterised in that it comprises transmitting means (1) of limitedpower, in order to authorize the reception of the signal by the receivermodule (11) only within a radius of several metres.
 7. A hardwareaccording to any of the claims 5 or 6, characterised in that itcomprises a switching system (14) in the form of power output interposedon the control circuit (15) of the apparatus to cut off or restore suchcircuit in relation to the signal or the absence of signal supplied bycontrol means in the form of a microprocessor (12), which microprocessor(12) manages the sending of this signal in relation to the informationreceived by the receiver module (11).
 8. A hardware according to any ofthe claims 5 to 7, characterised in that it comprises control means (12)laid out, once the apparatus in operation, to trigger by each activationof the presence detection means (22) a second safety detection of thesignal transmitted by the transmitting means (1), for a pre-set timeperiod, and once said time-period has expired, laid out to lock eitherthe closure of the control circuit (15) in case of a validation ofsignal, or the opening of said circuit (15) in case of non-validation ofthe signal, this without taking into account any longer, after saidlocked closure or opening, of the transmitter/receiver link.
 9. Ahardware according to any of the claims 5 to 8, suited to the provisionof an anti-theft safety device for an engine vehicle, characterised inthat it comprises portable transmitting means (1), a receiver module(11) on board said vehicle, presence detection means (22) integrated tosaid vehicle and control means (12) of a switching system (14) placed onat least a circuit necessary to the correct operation of said vehicle,for example the ignition circuit of the motorisation, the startercircuit or the fuel incoming circuit, which control means (12) are laidout to close said circuit (15) by means of said switching system (14)when the signal transmitted by the transmitting means (1) is detected bythe receiver module (11) and acknowledged, and laid out to manage thelocking of the closure or of the opening of said circuit (15) inrelation to the second identification control triggered by the presencedetection means (22).
 10. A hardware according to claim 9, characterisedin that it comprises presence detection means in the form of a sensor(22) implanted in or on the seat of the vehicle and adapted to beactivated when the user of the vehicle sits down on said seat.
 11. Ahardware according to claim 9, characterised in that it comprisespresence detection means in the form of a system for detecting when agear has been selected.
 12. A hardware according to claim 9,characterised in that it comprises presence detection means in the formof a system for detecting the threshold of a given engine duty.
 13. Ahardware according to claim 9, characterised in that it comprisespresence detection means in the form of a closure/opening sensor of thedriver's door, within the framework of an application to an automotivevehicle or to a lorry.
 14. A hardware according to claim 9,characterised in that it comprises presence detection means in the formof a safety belt fastening sensor, within the framework of anapplication to an automotive vehicle or to a lorry.
 15. A hardwareaccording to claim 9, characterised in that it comprises presencedetection means in the form of an infrared sensor implanted in the bodyof the car, within the framework of an application to an automotivevehicle or to a lorry.
 16. A hardware according to any of the claims 9to 15, characterised in that it comprises means (23) which enable todetect the presence or the absence of a starter contact, thecorresponding information being transmitted to the control means (12) inorder to activate the receiver module (11) only in case of presence ofsaid starter contact.
 17. A hardware according to any of the claims 9 to15, characterised in that it comprises a presence sensor close to thedriver's door, within the framework of an application to an automotivevehicle or to a lorry, the information regarding the activation of saidpresence sensor being transmitted to the control means (12) in order toactivate the receiver module (11).